Live Nation Entertainment
Lead Security Operations Center (SOC) Analyst
Live Nation Entertainment, Nevada, Iowa, United States, 50201
Job Summary
Live Nation Entertainment is the world’s leading live entertainment company, comprised of global market leaders: Ticketmaster, Live Nation Concerts, and Live Nation Media & Sponsorship. Ticketmaster is the global leader in event ticketing with over 620 million tickets sold annually and approximately 10,000 clients worldwide. Live Nation Concerts is the largest provider of live entertainment in the world promoting more than 50,000 events annually for nearly 7,000 artists in 40 countries. These businesses allow Live Nation Media & Sponsorship to create strategic music marketing programs that connect more than 1,200 sponsors with the 145 million fans that attend Live Nation Entertainment events each year. For additional information, visit . Who Are You?
Passionate and motivated. Driven, with an entrepreneurial spirit. Resourceful, innovative, forward thinking and committed. At Live Nation Entertainment, our people embrace these qualities, so if this sounds like you then please read on! The Team
Live Nation Entertainment is the world’s largest live entertainment company, composed of global market leaders: Ticketmaster, Live Nation Concerts, and Live Nation Media & Sponsorship. With 550 million fans and operations in over 40 countries, our security mission is to ensure those experiences remain uninterrupted and safe. The Detection and Response Team (DART) plays a key role in maintaining that trust, security, and resilience. The Role
As a US Lead Security and Operations (SOC) Analyst, you will serve as the bridge between frontline analysts and DART management, helping guide real‑time incident response, providing mentorship and quality assurance across shifts, and contributing to process development and strategic improvement. You will lead shift operations, act as an escalation point for complex investigations, and ensure consistent application of incident response processes across global teams. What This Role Will Do
Operational Leadership Coordinate daily DART shift activities to ensure smooth operations and adequate coverage. Act as an escalation point for high‑priority security alerts and investigations. Conduct QA reviews on tickets to ensure accuracy, completeness, and adherence to IR procedures. Lead shift handovers, ensuring continuity and communication across regions. Incident Response Monitor, query, and triage security alerts using SIEM, EDR, and NDR platforms. Perform in‑depth investigations into potential threats, applying TTP‑based analysis and leveraging internal tools. Collaborate with business units and technical teams during incident response to gather context and execute containment or remediation. Provide structured documentation and recommendations post‑incident. Team Support & Development Mentor junior and mid‑level analysts during investigations and incident response. Support onboarding and continuous training through documentation, coaching, and hands‑on guidance. Promote a culture of collaboration, accountability, and continuous improvement across shifts. Process & Tooling Contribution Help identify tooling or workflow gaps; provide recommendations to the DART Manager for improvements. Contribute to the creation and refinement of playbooks and operational procedures. Participate in tuning detection content and use‑case development in partnership with threat detection teams. Reporting & Metrics Assist in tracking key performance indicators (Time to Detect, Time to Resolve, Escalation Ratios, etc.). Support reporting functions by summarizing incidents and shift activities in alignment with team OKRs. What This Person Will Bring
5 years of experience in a cybersecurity analyst role, with at least 2 years in a lead or senior‑level capacity. Proven hands‑on experience with SIEM, EDR, NDR, and DFIR toolsets. In‑depth understanding of attacker TTPs (MITRE ATT&CK) and strong investigative mindset. Experience responding to incidents in cloud environments (AWS, Azure, GCP). Excellent written and verbal communication skills, especially in cross‑functional and high‑pressure scenarios. Ability to guide and inspire analysts of varying experience levels. Ability to work 9:00AM‑5:00PM EST/CST/PST. Additional Expectations
Participate in a 24/7 on‑call rotation. Demonstrate flexibility and ownership during incidents and surge periods. Collaborate closely with the DART Manager on planning, capacity tracking, and continuous team improvement. Preferred Certifications
GIAC Security Expert (GSE) GIAC Certified Incident Handler (GCIH) GIAC Certified Intrusion Analyst (GCIA) CompTIA Cybersecurity Analyst (CySA ) OSCP — Offensive Security Certified Professional CISSP — Certified Information Systems Security Professional Microsoft Certified: Cybersecurity Architect Expert or AWS Certified Security CompTIA Security Plus (Sec ) Benefits & Perks
Our motto is ‘Taking Care of Our Own’ through 6 pillars of benefits: HEALTH Medical, vision, dental and mental health benefits for you and your family, with access to a health care concierge, and Flexible or Health Savings Accounts (FSA or HSA). YOURSELF Free concert tickets, generous paid time off including paid holidays, sick time, and personal days. WEALTH 401(k) program with company match, stock reimbursement program. FAMILY New parent programs including caregiver leave and baby bonuses, plus fertility, adoption, foster, or surrogacy support. CAREER Career and skill development programs with School of Live, tuition reimbursement, and student loan repayment. OTHERS Volunteer time off, crowdfunding match. Equal Employment Opportunity
We aspire to build teams that reflect and support the fans and artists we serve. Every day we aim to promote environments where everyone can be themselves, contribute fully, and thrive within our company and at our events. As a growing business we will encourage you to develop your professional and personal aspirations, enjoy new experiences, and learn from the talented people you will be working with. Live Nation is an equal opportunity employer. It hires and promotes employees based on their experience, talent, and qualifications for the job and does not tolerate discrimination toward employees based on age, ancestry, color, religious creed, family and medical care leave, disability, marital status, military and veteran status, political affiliation, national origin, citizenship, race, sex, gender identity, sexual orientation, and other protected bases. It will consider qualified applicants with criminal histories in a manner consistent with applicable laws. Live Nation does not discriminate against employees or applicants with disabilities, and will make reasonable accommodations for the known limitations of a qualified individual. Those who require accommodation should contact the hiring manager or a Human Resources representative for a timely process. Hiring Practices
The preceding job description has been designed to indicate the general nature and level of work performed by employees within this classification. It is not designed to contain or be interpreted as a comprehensive inventory of all duties, responsibilities, and qualifications required of employees assigned to this job. Live Nation recruitment policies are designed to place the most highly qualified persons available in a timely and efficient manner. Live Nation Entertainment
#J-18808-Ljbffr
Live Nation Entertainment is the world’s leading live entertainment company, comprised of global market leaders: Ticketmaster, Live Nation Concerts, and Live Nation Media & Sponsorship. Ticketmaster is the global leader in event ticketing with over 620 million tickets sold annually and approximately 10,000 clients worldwide. Live Nation Concerts is the largest provider of live entertainment in the world promoting more than 50,000 events annually for nearly 7,000 artists in 40 countries. These businesses allow Live Nation Media & Sponsorship to create strategic music marketing programs that connect more than 1,200 sponsors with the 145 million fans that attend Live Nation Entertainment events each year. For additional information, visit . Who Are You?
Passionate and motivated. Driven, with an entrepreneurial spirit. Resourceful, innovative, forward thinking and committed. At Live Nation Entertainment, our people embrace these qualities, so if this sounds like you then please read on! The Team
Live Nation Entertainment is the world’s largest live entertainment company, composed of global market leaders: Ticketmaster, Live Nation Concerts, and Live Nation Media & Sponsorship. With 550 million fans and operations in over 40 countries, our security mission is to ensure those experiences remain uninterrupted and safe. The Detection and Response Team (DART) plays a key role in maintaining that trust, security, and resilience. The Role
As a US Lead Security and Operations (SOC) Analyst, you will serve as the bridge between frontline analysts and DART management, helping guide real‑time incident response, providing mentorship and quality assurance across shifts, and contributing to process development and strategic improvement. You will lead shift operations, act as an escalation point for complex investigations, and ensure consistent application of incident response processes across global teams. What This Role Will Do
Operational Leadership Coordinate daily DART shift activities to ensure smooth operations and adequate coverage. Act as an escalation point for high‑priority security alerts and investigations. Conduct QA reviews on tickets to ensure accuracy, completeness, and adherence to IR procedures. Lead shift handovers, ensuring continuity and communication across regions. Incident Response Monitor, query, and triage security alerts using SIEM, EDR, and NDR platforms. Perform in‑depth investigations into potential threats, applying TTP‑based analysis and leveraging internal tools. Collaborate with business units and technical teams during incident response to gather context and execute containment or remediation. Provide structured documentation and recommendations post‑incident. Team Support & Development Mentor junior and mid‑level analysts during investigations and incident response. Support onboarding and continuous training through documentation, coaching, and hands‑on guidance. Promote a culture of collaboration, accountability, and continuous improvement across shifts. Process & Tooling Contribution Help identify tooling or workflow gaps; provide recommendations to the DART Manager for improvements. Contribute to the creation and refinement of playbooks and operational procedures. Participate in tuning detection content and use‑case development in partnership with threat detection teams. Reporting & Metrics Assist in tracking key performance indicators (Time to Detect, Time to Resolve, Escalation Ratios, etc.). Support reporting functions by summarizing incidents and shift activities in alignment with team OKRs. What This Person Will Bring
5 years of experience in a cybersecurity analyst role, with at least 2 years in a lead or senior‑level capacity. Proven hands‑on experience with SIEM, EDR, NDR, and DFIR toolsets. In‑depth understanding of attacker TTPs (MITRE ATT&CK) and strong investigative mindset. Experience responding to incidents in cloud environments (AWS, Azure, GCP). Excellent written and verbal communication skills, especially in cross‑functional and high‑pressure scenarios. Ability to guide and inspire analysts of varying experience levels. Ability to work 9:00AM‑5:00PM EST/CST/PST. Additional Expectations
Participate in a 24/7 on‑call rotation. Demonstrate flexibility and ownership during incidents and surge periods. Collaborate closely with the DART Manager on planning, capacity tracking, and continuous team improvement. Preferred Certifications
GIAC Security Expert (GSE) GIAC Certified Incident Handler (GCIH) GIAC Certified Intrusion Analyst (GCIA) CompTIA Cybersecurity Analyst (CySA ) OSCP — Offensive Security Certified Professional CISSP — Certified Information Systems Security Professional Microsoft Certified: Cybersecurity Architect Expert or AWS Certified Security CompTIA Security Plus (Sec ) Benefits & Perks
Our motto is ‘Taking Care of Our Own’ through 6 pillars of benefits: HEALTH Medical, vision, dental and mental health benefits for you and your family, with access to a health care concierge, and Flexible or Health Savings Accounts (FSA or HSA). YOURSELF Free concert tickets, generous paid time off including paid holidays, sick time, and personal days. WEALTH 401(k) program with company match, stock reimbursement program. FAMILY New parent programs including caregiver leave and baby bonuses, plus fertility, adoption, foster, or surrogacy support. CAREER Career and skill development programs with School of Live, tuition reimbursement, and student loan repayment. OTHERS Volunteer time off, crowdfunding match. Equal Employment Opportunity
We aspire to build teams that reflect and support the fans and artists we serve. Every day we aim to promote environments where everyone can be themselves, contribute fully, and thrive within our company and at our events. As a growing business we will encourage you to develop your professional and personal aspirations, enjoy new experiences, and learn from the talented people you will be working with. Live Nation is an equal opportunity employer. It hires and promotes employees based on their experience, talent, and qualifications for the job and does not tolerate discrimination toward employees based on age, ancestry, color, religious creed, family and medical care leave, disability, marital status, military and veteran status, political affiliation, national origin, citizenship, race, sex, gender identity, sexual orientation, and other protected bases. It will consider qualified applicants with criminal histories in a manner consistent with applicable laws. Live Nation does not discriminate against employees or applicants with disabilities, and will make reasonable accommodations for the known limitations of a qualified individual. Those who require accommodation should contact the hiring manager or a Human Resources representative for a timely process. Hiring Practices
The preceding job description has been designed to indicate the general nature and level of work performed by employees within this classification. It is not designed to contain or be interpreted as a comprehensive inventory of all duties, responsibilities, and qualifications required of employees assigned to this job. Live Nation recruitment policies are designed to place the most highly qualified persons available in a timely and efficient manner. Live Nation Entertainment
#J-18808-Ljbffr